engelsystem records

4 published records for vendor engelsystem.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2018-19182No exploit	Engelsystem before commit hash 2e28336 allows CSRF.engelsystem · engelsystem · CWE-352 Pre-auth CSRF	High8.8	—	0.6%	Dec 26, 2018
21Monitor	CVE-2023-50924No exploit	Stored XSS in Overview and Output fieldsengelsystem · engelsystem · CWE-79 XSS	Medium5.4	—	0.3%	Dec 22, 2023
11Monitor	CVE-2023-45659No exploit	Session is not expiring after password reset in Engelsystemengelsystem · engelsystem · CWE-613	Low2.8	—	0.2%	Oct 16, 2023
9Monitor	CVE-2023-45152No exploit	Blind Server Side Request Forgery (SSRF) in remote schedule import feature in Engelsystemengelsystem · engelsystem · CWE-918 SSRF	Low2.3	—	0.3%	Oct 16, 2023

CVE-2018-19182
35Monitor
Engelsystem before commit hash 2e28336 allows CSRF.
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- CSRF
engelsystem · engelsystemDec 26, 2018
CVE-2023-50924
21Monitor
Stored XSS in Overview and Output fields
MediumCVSS 5.4No exploitEPSS 0%
- XSS
engelsystem · engelsystemDec 22, 2023
CVE-2023-45659
11Monitor
Session is not expiring after password reset in Engelsystem
LowCVSS 2.8No exploitEPSS 0%
engelsystem · engelsystemOct 16, 2023
CVE-2023-45152
9Monitor
Blind Server Side Request Forgery (SSRF) in remote schedule import feature in Engelsystem
LowCVSS 2.3No exploitEPSS 0%
- SSRF
engelsystem · engelsystemOct 16, 2023